digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested at runtime from external X/Twitter posts via the required Path A direct-curl to https://api.x.ai/v1/responses (with the returned post full text parsed by jq and added into the candidate pool) and from outsider-authored RSS/Atom entries fetched from URLs in memory/feeds.yml.